函数逻辑报告 |
Source Code:kernel\auditsc.c |
Create Date:2022-07-27 12:31:04 |
Last Modify:2020-03-17 16:31:21 | Copyright©Brick |
首页 | 函数Tree |
注解内核,赢得工具 | 下载SCCT | English |
函数名称:__audit_syscall_entry - fill in an audit record at syscall entry*@major: major syscall type (function)*@a1: additional syscall register 1*@a2: additional syscall register 2*@a3: additional syscall register 3*@a4: additional syscall register 4
函数原型:void __audit_syscall_entry(int major, unsigned long a1, unsigned long a2, unsigned long a3, unsigned long a4)
返回类型:void
参数:
类型 | 参数 | 名称 |
---|---|---|
int | major | |
unsigned long | a1 | |
unsigned long | a2 | |
unsigned long | a3 | |
unsigned long | a4 |
1631 | context等于audit_context() |
1634 | 如果非audit_enabled或非context则返回 |
1643 | 调用号等于非umber of audit rules |
1645 | prio等于0 |
1650 | arch等于syscall_get_arch(当前进程) |
1656 | 序号等于0 |
1657 | 是系统调用等于1 |
1660 | ktime_get_coarse_real_ts64( & 系统调用时间) |
源代码转换工具 开放的插件接口 | X |
---|---|
支持:c/c++/esqlc/java Oracle/Informix/Mysql 插件可实现:逻辑报告 代码生成和批量转换代码 |